Privacy Policy · 隐私政策
Island Smart Travel AI (海岛智游)
_Last updated: 2026-06-22_
1. Who We Are
Island Smart Travel AI ("we", "our", "the Service") is an AI-powered travel assistant for foreign tourists visiting Hainan, China. The Service is operated by an independent developer based in Hainan, China.
Contact for privacy matters:
📧 Email: _[请填写你的邮箱]_
📍 海南省海口市江东新区海涛大道3号海南师范大学国家大学科技园
💬 In-app: Type "Privacy Request" in the chat or use the Complaints & Feedback channel.
2. What Data We Collect
2.1 Data You Provide
| Data Category | Example | Purpose |
|---------------|---------|---------|
| Chat messages | Questions you type into the chat | To generate AI responses |
| Feedback | 👍/👎 ratings + optional text feedback | To improve service quality |
| Language preference | Which UI language you select | To display the interface correctly |
2.2 Data We Do NOT Collect
- ❌ Passport numbers, ID numbers, or visa details
- ❌ Payment information or credit card numbers
- ❌ Precise GPS location
- ❌ Contact lists or address books
- ❌ Health or medical data (beyond what you voluntarily type into chat)
- ❌ Biometric data
- ❌ Cookies or tracking identifiers (we use zero cookies)
2.3 Automatically Collected Data
- Technical logs: IP address, browser type, request timestamp — standard HTTP server logs, retained for debugging only. These are NOT linked to your chat identity.
3. How We Use Your Data
| Purpose | Legal Basis | Data Used |
|---------|-------------|-----------|
| Generate AI responses | Legitimate interest / Contract | Chat messages |
| Improve service quality | Legitimate interest | Feedback (👍/👎, text) |
| Display correct language | Legitimate interest | Language preference |
| Debug technical issues | Legitimate interest | Server logs (IP, timestamp) |
We do NOT:
- Sell your data to third parties
- Use your data for advertising or profiling
- Train AI models on your chat messages
- Make automated decisions that legally affect you
4. Third-Party Services
Your data may be processed by the following third parties:
| Service | What It Does | Where Data Goes |
|---------|-------------|-----------------|
| DeepSeek API | Generates AI responses from your chat messages | China (DeepSeek servers) |
| Langfuse | Stores feedback analytics (👍/👎 + text) | Japan (jp.cloud.langfuse.com) |
⚠️ Important Notice About Langfuse
When you submit feedback (thumbs up/down + optional comment), this data is sent to Langfuse (hosted in Japan). This is a cross-border data transfer. Langfuse is an analytics platform we use to monitor and improve response quality.
We minimize what is sent to Langfuse:
- ✅ Feedback rating (👍/👎)
- ✅ Optional feedback text
- ✅ Anonymized trace ID
- ❌ Your IP address (not sent)
- ❌ Your chat history (not sent)
If you prefer your feedback to stay local, simply don't use the 👍/👎 buttons — your chat still works normally.
5. Data Storage & Retention
| Data | Where Stored | Retention Period |
|------|-------------|-----------------|
| Chat messages | Memory (RAM) during session; anonymized hash logged for debugging | Duration of your browser session (hash: 90 days) |
| Feedback | Local JSONL file (China) + Langfuse (Japan) | 90 days, then deleted |
| Server logs | Local disk (China) | 30 days, then rotated |
6. Data Security
We implement the following security measures:
- No permanent chat storage — message content exists only in your active session; anonymized hashes stored for service improvement
- No database — there is no user database to breach
- API keys stored in environment variables, never in source code
- gitleaks pre-commit hooks to prevent accidental secret exposure
- Input/output content filtering to prevent prompt injection
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Depending on where you are located, you may have the following rights:
| Right | What It Means | How to Exercise |
|-------|---------------|-----------------|
| Access | See what data we have about you | Type "Privacy Request" in chat |
| Rectification | Correct inaccurate data | Type "Privacy Request" in chat |
| Erasure | Request deletion of your data | Type "Privacy Request" in chat |
| Restriction | Limit how we process your data | Type "Privacy Request" in chat |
| Objection | Object to processing | Type "Privacy Request" in chat |
| Data Portability | Get a copy of your data | Type "Privacy Request" in chat |
For EU/EEA users (GDPR):
- Legal basis: Article 6(1)(f) — legitimate interest, and Article 6(1)(b) — contract performance
- You have the right to lodge a complaint with your local Data Protection Authority
- We do not have a designated EU Representative at this stage (pre-launch beta). One will be appointed before full public launch.
For California residents (CCPA/CPRA):
- We do not meet the CCPA applicability thresholds (annual revenue >$26.6M, or 100,000+ California consumers). However, we voluntarily honor deletion and access requests.
For Russian citizens:
- All primary data collection and storage occurs on servers located in China. No data is initially written to foreign databases.
8. Children's Privacy
This Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us and we will delete it.
9. International Data Transfers
| Transfer | From | To | Safeguard |
|----------|------|----|-----------|
| Chat → AI | Your browser | DeepSeek (China) | HTTPS encryption |
| Feedback → Analytics | Your browser | Langfuse (Japan) | HTTPS, minimized data |
By using this Service, you acknowledge that your data may be processed in China and Japan. China and Japan have their own data protection laws (PIPL and APPI respectively).
10. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top will reflect the most recent changes. Continued use of the Service after changes constitutes acceptance.
11. Legal Compliance
This Service complies with:
- 🇨🇳 China: Interim Measures for the Management of Generative Artificial Intelligence Services (《生成式人工智能服务管理暂行办法》), Personal Information Protection Law (PIPL)
- 🇪🇺 EU: General Data Protection Regulation (GDPR) — to the extent applicable
- 🇺🇸 US: California Consumer Privacy Act (CCPA/CPRA) — voluntarily honored
12. FAQ
Q: Do you store my chat history?
A: No. Chat messages live only in your browser's active session memory. When you close the tab, they're gone.
Q: Can you see my chats?
A: No. We do not have access to individual chat sessions. Only anonymized feedback ratings are reviewed.
Q: Is my data used to train AI?
A: No. We use the DeepSeek API, which does not train on API customer data.
Q: How do I delete everything?
A: Close your browser tab — that's it. For feedback data, type "Privacy Request" in the chat.
*This privacy policy is available in English and Chinese. In case of discrepancy, the Chinese version shall prevail, except where local law requires otherwise.*